IN THE SPECIFICATION 


Please replace paragraph [0026] with the following amended paragraph: 

[0026] Under the direction of the cookie generator 124 and controller 120, a nonce 
generator 430 132 g enerates a nonce. As illustrated in FIG. 1, the nonce generator 43Q 132 is 
a software module that forms part of the login control module 118. The nonce generator may 
include a random number generator, or a pseudo-random number generator, that generates a 
sequence of numbers (i.e., nonce values) from a starting seed value. 

Please replace paragraph [0027] with the following amended paragraph: 

[0027] The validity stamp stored in the validity stamp entry 306 establishes the validity 
of the login cookie 300 (i.e., prevents login cookie 300 forgery). The contents of the validity 
stamp entry 306 are, preferably, based on a secret code available only to the server 102 and 
generated, under the direction of the cookie generator 124 or controller 120, by a validity 
stamp generator 130 433. As illustrated in FIG. 1, the stamp generator 130 433 is a software 
module that forms part of the login control module 118. The design of the stamp generator 
130 433 is subject to much variation without departing from the scope of the present invention 
so long as the stamp generator 130 433 is able to calculate sufficiently secure validation 
stamps. In one embodiment, for example, the stamp generator 130 433 calculates an HMAC- 
MD5 cryptographic checksum over contents of the cookie using a secret code available only 
to the server 102. By analyzing the validity stamp entry 306, the cookie checker and updater 
128 determines whether the validity stamp is based on the secret code, and thus valid. 
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